The clone script now takes explicit arguments for subnet, security group
and there is a dedicated vpc in the prod account for database clones

There is some work outstanding before this is ready but I believe
it's complete enough to merge.  There will be more logic added
to sanitize and change the db password after the clone is complete

This PR makes the following changes:

* Defaults to the edx.org zone instead of a vpc zone
* Takes an AWS id and secret to query another account for instance info
* Adds some safe guards around duplicate dns entries
* Creates an ban list for elbs

This change also puts both a jumpbox rule and a private ip address rule
for the jumpbox so that ansible can provision it.